LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Software (https://www.linuxquestions.org/questions/linux-software-2/)
-   -   Interchange upgrage from 4.2 to 2.8.6 (https://www.linuxquestions.org/questions/linux-software-2/interchange-upgrage-from-4-2-to-2-8-6-a-32887/)

jflook 10-15-2002 02:52 PM

Interchange upgrage from 4.2 to 2.8.6
 
We had to upgrade our server from interchange version 4.2 with redhat 7.0 to version 4.8.6 with redhat 7.2.

It was not an actual upgrade due to a hacker messing with the eth0 so we had to rely on a backup a day ago. The whole server is actually backed up, but due to the security holed in 4.2 we took a brand new machine put rh 7.2 and interchange 4.8.6. Restored the needed files.

There is one problem:
The files in /var/www/cgi-bin/* are system protected with a permissions of -rwSr-sr-x

What is the S and little s for how do I take it off/add it and is it possible to move that invo to another computer with out corrupting. Or do I have to unconvert it and then move.

-HELP

jflook 10-15-2002 02:54 PM

Sorry about that.... it is 4.2 to 4.8.6 interchange

neo77777 10-15-2002 11:33 PM

In the permission scheme you got there is hell lot of a security hole - s and S are suid and sgid whic tell the system to run scripts in the context of the user and group who instantiated the scripts. For instance if a script performs crtical system calls this means that if user A runs this script he might insert some nusty malformed requests into the script, and hence, undermine the security (the capital S with rw gives the user a permission to modify the script, even remove it) of the whole system, you should be very careful with those. The permissions were created with
chmod 6645

jflook 10-16-2002 03:29 AM

I know that is a security hole cause we got hacked and who ever did it changed those permissions. Thanks a million on how to set them.

:D


All times are GMT -5. The time now is 02:28 AM.